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DETAILED ACTION 



I. 



Claims 1-18 have been examined. 



Response to Arguments 



2. 



Applicant's arguments with respect to claims 1-18 have been considered but are moot in 



view of the new ground(s) of rejection. See Liang (US 7,120,572 Bl), art made of record. 



Drawings 



3. 



The subject matter of this application admits of illustration by a drawing to facilitate 



understanding of the invention. Applicant is required to furnish a drawing under 37 CFR 1.81(c). 
No new matter may be introduced in the required drawing. Each drawing sheet submitted after the 
filing date of an application must be labeled in the top margin as either "Replacement Sheet" or 
"New Sheet" pursuant to 37 CFR 1.121(d). 



4. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or any 
new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and requirements of 
this tide. 

Claim 16 is rejected under 35 U.S.C. 101 because the claimed invention is directed to non- 
statutory subject matter. 

Claim 1 6 is directed to a system. However, as recited, the system is reasonably interpreted as 
entirely software, which amounts to descriptive material per se. The system is not supported by 
hardware such as tangible computer storage or execution engine, which would enable one skill in the 



Claim Rejections - 35 USC § 101 
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art to construe that the system, is built from tangible product to carry out any functionality being 
conveyed from the claim. Thus, the system is software perse and therefore is not being tangibly 
embodied in a manner as to be executable. See MPEP § 2106.01. 

Claims 17-18 are rejected for failing to cure the deficiencies of the above rejected non- 
statutory claim 1 6 above. 

Claim Rejections - 35 USC § 102 

5. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall he entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed in 
the United States before the invention by the applicant for patent or (2) a patent granted on an application for patent 
by another filed in the United States before the invention by the applicant for patent, except that an international 
application filed under the treaty defined in section 351(a) shall have the effects for purposes of this subsection of an 
application filed in the United States only if the international application designated the United States and was 
published under Article 21(2) of such treaty in the English language. 

6. Claims 1-18 are rejected under 35 U.S.C. 102(e) as being anticipated by Liang (US 7,120,572 
Bl). 

Per claim 1 (Currently Amended), Liang teaches a method for determining the operational 
characteristics of a program, comprising a verification procedure comprising the following steps (see 
at least e.g. FIG. 5, steps 300-306 "At authoring system Pre- verify class file..." and related text): 

a first step comprising: 

expressing the operational characteristics of the program as functions dealing with 
occurrences or sequences of occurrences of events occurring which may occur during possible 
executions of the program (see at least col.5:l-15 ". . . full program verifier for verifying whether or 
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not a specified program satisfies certain predefined integrity criteria. . ."), said events being able to 
deal with particular operations, particular values of data (see at least e.g. FIG. 5, 308-306 and related 
text), at particular program points and in particular states of the program (see at least col.l 0:30-45 
"... verifier returns a verification failure value, ... to execute the specified program. . . "); 

determining a possible level of precision with which these characteristics must be determined 
(see at least col.5:l-15 ". . . full program verifier for verifying whether or not a specified program 
satisfies certain predefined integrity criteria. . ."); 

determining a possible set of particular contexts of execution in which the program will 
always be executed (see at least col.6:20-35 "... stack and local variable contents prior to their 
execution.... program verification process..." and col.7:l-20 "... program may contain errors 
involving the data type of operands not matching ... fail during execution. . ."); 

determining possible operational specificities of a set of platforms on which the program will 
be executed (see at least col.6:35-55 ". . .programs executed on one will not be executed on the 
others. . . platform specific. . ."); 

a second step of estimation, by program analysis, and in consideration of said possible level 
of precision, of said possible set of particular contexts of execution and of said possible operational 
specificities of platforms (see at least col.27:25-45 "... verify that execution of the program will not 
violate the data type restriction. . ."), at various points of the execution paths and under different 
execution conditions, of the states of the program and data handled by the program (see at least 
col.5:l-15 "... full program verifier for verifying whether or not a specified program satisfies certain 
predefined integrity criteria. . ."); 

a third step for determining said operational characteristics, by means of the information 
extracted by said program analysis (see at least e.g. FIG. 7A-7B, 350-364, 380-392 and related text), 
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by the computation of said functions on the occurrences or particular sequences of occurrences of 
particular operations, dealing with particular values, at particular points of the program, (see at least 
col.l4:55-65 "... detect any stack or register usage error during analysis... verification success flag..."), 
in particular states of the program, for the set of execution paths determined by analysis (see at least 
col.l0:30-45 ". . . verifier returns a verification failure value, ... to execute the specified program. . . 
")• 

Per claim 2 (Currently Amended), Liang teaches wherein, in the case when the program is 
interactive and may depend on an undetermined number of dynamic values resulting from this 
interaction (see at least col.l0:35-55 ". . . operand stack overflow and underflow checking. . .during 
program execution. . ."), the contexts of execution are given by a description abstracted from 
possible series of data representing said dynamic values (see at least e.g. FIG. 7A, 350 and related 
text)* 

Per claim 3 (Currently Amended), Liang teaches, wherein , in the case where the program is 
inserted into a framework of execution (see at least e.g. FIG. 7A, 356 and related text), said second 
step of estimation comprises static analysis which_also take into account the semantics of this 
framework of execution, including -the possible implicit interaction loops of the program (see at least 
col.26: 15-45 "... get static field values. .."). 

Per claim 4 (Currently Amended), Liang teaches wherein certain of said particular 
operations, which from events, accompanied by constraints on the values handled, the execution 
points (see at least col. 6:20-3 5 ". . . stack and local variable contents prior to their execution.... 
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program verification process..." and col.7:l-20 ". . . program may contain errors involving the data 
type of operands not matching . . . fail during execution. . ."), and the statuses of the program are 
defined as one of the following actions (see at least col.l0:35-55 ". . . operand stack overflow and 
underflow checking. . .during program execution. . ."): call to a given routine, access to a given 
variable, reading or writing on a given port, computation of a given arithmetic expression, 
completion of execution of the program or of a routine on a normal return or ending an exception 
(see at least col.26:15-45 "... get static field values..."). 

Per claim 5 (Currently Amended), Liang teaches wherein certain of said static analysis consist 
of abstract interpretations of the program (see at least col.26:15-45 ". . . get static field values. . ."), on 
abstract domains which may notably represent possible sets of values and symbolic expressions (see 
at least col.l4:55-65 "... detect any stack or register usage error during analysis... verification success 
flag..."). 

Per claim 6, Liang teaches wherein said extracted information are represented by means of 
one or more of the following structures: status graph of the program, inheritance graph, graph of the 
routine calls of the program (see at least col.6:20-35 ". . . stack and local variable contents prior to 
their execution.... program verification process..." and col.7:l-20 ". . . program may contain errors 
involving the data type of operands not matching ... fail during execution. . ."), control flow chart of 
each routine of the program, structure of loops and catch-up of exceptions, structure of basic 
blocks, abstraction of the status of the program at an execution point (see at least col.26:l 5-35 "... 
call method. . . static method. . ."). 
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Per claim 7, Liang teaches wherein_said extraction of information does not apply to 
unnecessary information for determining the operational characteristics (see at least col.5:l-15 "... 
full program verifier for verifying whether or not a specified program satisfies certain predefined 
integrity criteria. . ."), both from the viewpoint of the amount of information extracted and from the 
precision of these pieces of information (see at least e.g. FIG. 7A, 350 and related text). 

Per claim 8, Liang teaches wherein only major pieces of information among said extracted 
information are computed and saved and in that the other pieces of information are only computed 
when necessary for determining said operational characteristics (see at least col.6:20-35 ". . . stack 
and local variable contents prior to their execution.... program verification process..." and col.7:l-20 
"... program may contain errors involving the data type of operands not matching . . . fail during 
execution..."). 

Per claim 9 (Currently Amended), Liang teaches wherein the major pieces of information are 
information extracted at breakdown nodes of the code of routines in a graph of basic blocks (see at 
least col.5:50-60 instruction set is characterized by byte code instruction . . . data type specific. . .") 
and in that the other pieces of information in the body of the basic blocks are recomputed by local 
analysis from information saved at the start and end of the corresponding block (see at least 
col.26: 15-45 "... get static field values. .."). 

Per claim 10 (Currently Amended), Liang teaches wherein said operational characteristics 
represent validity criteria and in that said determination establishes that the program is valid because 
it observes each of said criteria (see at least col.6:20-35 "... stack and local variable contents prior to 
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their execution.... program verification process..." and col.7:l-20 ". . . program may contain errors 
involving the data type of operands not matching . . . fail during execution. . ."), or invalid because at 
least one of said criteria cannot be observed (see at least col.l0:30-45 "... verifier returns a 
verification failure value, ... to execute the specified program. . . "). 

Per claim 11, Liang teaches wherein said validity criteria express security or interoperability 
rules (see at least col.5:l-15 "... full program verifier for verifying whether or not a specified 
program satisfies certain predefined integrity criteria..."). 

Per claim 12, Liang teaches wherein said operational characteristics characterize resources 
which are consumed and functionalities which are exploited by the program during its execution (see 
at least col.7:l-20 "... program may contain errors involving the data type of operands not matching 
. . . fail during execution. . .") and in that said determination provides an execution profile of the 
program (see at least col.l 5:55-65 "... actual execution of the program for each datum to be 
pushed..."). 

Per claim 13, Liang teaches wherein a computation of certain of said functions associated 
with the operational characteristics is performed during said static program analysis, as soon as 
certain of said pieces of information are extracted (see at least col.26:15-45 "... get static field 
values..."). 

Per claim 14 (Currently Amended), Liang teaches the method according to claim 10 for 
automatic filtering of a set of programs relative to a given set of validity criteria, wherein the 
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extraction of information by static program analysis is only completed once per program (see at least 
col.6:20-35 ". . . stack and local variable contents prior to their execution.... program verification 
process..." and col.7:l-20 "... program may contain errors involving the data type of operands not 
matching . . . fail during execution. . .") and reused whenever necessary for determining whether the 
program observes said set of validity criteria (see at least col. 10:30-45 "... verifier returns a 
verification failure value, ... to execute the specified program. . . "). 

Per claim 15 (Currently Amended), Liang teaches method for distribution of applications 
ensuring that the applications observe validity criteria associated with the execution platforms of 
these applications, comprising filtering means designed such that, for any client desiring to accede to 
the applications for a certain execution platform (see at least col.5:l-15 ". . . full program verifier for 
verifying whether or not a specified program satisfies certain predefined integrity criteria. . ."), the 
applications are filtered by a verification procedure in accordance with the method according to any 
one of claims 1 to 12, only the applications which observe the validity criteria for said platform 
being presented to the client (see at least col.7:l-20 "... program may contain errors involving the 
data type of operands not matching ... fail during execution. . ."). 

Per claim 16 (Currently Amended), Liang teaches a system for multi- application execution 
ensuring that the applications observe given validity criteria, comprising: 

an application analysis server, a server for validation of applications and a multi- application 
platform (see at least e.g. FIG. 1, 102, 105 and related text), and 

means for ensuring, prior to loading or execution of an application on the platform (see at 
least e.g. FIG. 1, 102, 103, 105 and related text): 
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observance by this application of said validity criteria an extraction of information being 
carried out on the application analysis server and an evaluation of said validity criteria being carried 
out on the server for validation of applications (see at least col.5:l-15 ". . . full program verifier for 
verifying whether or not a specified program satisfies certain predefined integrity criteria. . ."), and 

in the case w hen one of the validity criteria cannot be observed, a failure of loading or 
execution of the application a change of the status of the system and an emission of a sound or 
visual signal to alert of failure of loading or execution, the means for ensuring observance by said 
application of said validity criteria executing a procedure comprising the following steps (see at least 
e.g. FIG. 5, 308-306 and related text), at particular program points and in particular states of the 
program (see at least col. 10:30-45 "... verifier returns a verification failure value, ... to execute the 
specified program. . . "):- 

first step comprising: 

expressing the validity criteria of the program as functions dealing with occurrences or 
sequences of occurrences of events occurring executions of the program, said events being able to 
deal with particular operations, particular values, at particular program points and in particular states 
of the program (see at least e.g. FIG. 5, 308-306 and related text), at particular program points and in 
particular states of the program (see at least col.l0:30-45 ". . . verifier returns a verification failure 
value, ... to execute the specified program. . . "); 

determining a possible level of precision with which these validity criteria must be 
determined (see at least col.5:l-15 ". . . full program verifier for verifying whether or not a specified 
program satisfies certain predefined integrity criteria..."); 

determining a possible set of particular contexts of execution in which the program will 
always be executed (see at least col.6:20-35 "... stack and local variable contents prior to their 
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execution.... program verification process..." and col.7:l-20 ". . . program may contain errors 
involving the data type of operands not matching . . . fail during execution. . ."); 

determining possible operational specificities of a set of platforms on which the program will 
be executed (see at least col.6:35-55 ".. .programs executed on one will not be executed on the 
others. . . platform specific. . ."); 

a second step of estimation, by program analysis, and in consideration of said possible level 
of precision, of said possible set of particular contexts of execution and of said possible operational 
specificities of platforms (see at least col.27:25-45 "... verify that execution of the program will not 
violate the data type restriction. . ."), of information relating to the structure of the program, the 
possible execution paths of the program and to the values of possible data, at various points of the 
execution paths and under different execution conditions, of the states and data handled by the 
program (see at least col.5:l-15 ". . . full program verifier for verifying whether or not a specified 
program satisfies certain predefined integrity criteria..."); 

a third step for determining said validity criteria, by means of the information extracted by 
said program analysis (see at least e.g. FIG. 7A-7B, 350-364, 380-392 and related text), by the 
computation of said functions on the occurrences or particular sequences of occurrences of 
particular operations (see at least col.l4:55-65 "... detect any stack or register usage error during 
analysis... verification success flag..."), dealing with particular values, at particular points of the 
program, in particular states of the program , for the set of execution paths determined by analysis 
(see at least col. 10:30-45 "... verifier returns a verification failure value, ... to execute the specified 
program... "). 
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Per claim 1 7, Liang teaches wherein the server for validation of applications is executed on 
the multi- application platform, the application analysis server executing outside the platform (see at 
least col.6:35-55 ". . .programs executed on one will not be executed on the others. . . platform 
specific..."). 

Per claim 1 8, Liang teaches wherein the application analysis server and the server for 
validation of applications are executed on the multi-application platform (see at least e.g. FIG. 1, 
102, 105 and related text). 

Conclusion 

7. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to ISAAC T. TECKLU whose telephone number is (571) 272-7957. The 
examiner can normally be reached on M-TH 9:300A - 8:00P. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Tuan Q. Dam can be reached on (571) 272-3695. The fax phone number for the organization 
where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR system, 
contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would like 
assistance from a USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Isaac T Tecklu/ /Tuan Q. Dam/ 

Examiner, Art Unit 2192 Supervisory Patent Examiner, Art Unit 2192 



